Washington Post article: Dissertation Could Be Security Threat

2003-07-08 Thread Mike Suter
http://www.washingtonpost.com/wp-dyn/articles/A23689-2003Jul7.html Sean Gorman's professor called his dissertation tedious and unimportant. Gorman didn't talk about it when he went on dates because it was so boring they'd start staring up at the ceiling. But since the Sept.

Re: Mark Allman: Internet measurement: what next?

2003-07-08 Thread Mike Lloyd
Eddy, E.B. Dreger wrote: You mean something like RouteScience [supposedly] does or ECN influencing next hop? Guilty as charged, of course :-) Yes, I know, that would get ugly for transit ASes. Well, the measurement itself isn't ugly - it's just a question of what you choose to do with the

Backbone Infrastructure and Secrecy

2003-07-08 Thread Adam Kujawski
NANOG's Sean Gorman is in the news: http://www.washingtonpost.com/wp-dyn/articles/A23689-2003Jul7.html I would find GIS like the one described *very* usefull in finding transport providers. If I could see who has what where, I would know who to go to for quotes. As it stands, most of this

Re: Mark Allman: Internet measurement: what next?

2003-07-08 Thread Matt Levine
On Tuesday, July 8, 2003, at 12:24AM, Jack Bates wrote: E.B. Dreger wrote: SL Date: Mon, 7 Jul 2003 19:47:53 +0100 SL From: Simon Lockhart SL As predominantly a content hoster, I'd love to know more about the path SL between my servers and the end user. Stuff like how much bandwidth is SL

Re: [Backbone Infrastructure and Secrecy]

2003-07-08 Thread Joshua Sahala
i think that that is the point of the article - mr gorman is 'the one' ;) he mapped something that those who put it together hoped was unmappable. now it seems that they are blaming their incompetance on his skills. could his work be used to better our 'critical' infrastructure? sure. could

Re: Backbone Infrastructure and Secrecy

2003-07-08 Thread Jared Mauch
On Tue, Jul 08, 2003 at 11:29:23AM -0400, Adam Kujawski wrote: NANOG's Sean Gorman is in the news: http://www.washingtonpost.com/wp-dyn/articles/A23689-2003Jul7.html I would find GIS like the one described *very* usefull in finding transport providers. If I could see who has what

Re: Backbone Infrastructure and Secrecy

2003-07-08 Thread Pete Kruckenberg
On Tue, 8 Jul 2003, Adam Kujawski wrote: Who, besides Sean, has maps like this? The state PUC? If so, is that information available to the public? Do you have to go thorugh a background check and/or sign an NDA? Or is it only the providers themselves that have the maps for this stuff? It

Re: Backbone Infrastructure and Secrecy

2003-07-08 Thread Eric Kuhnke
Barn door, horse is already gone. I'm willing to stipulate that Sean may be a GIS wizard, and has compiled a very accurate listing of north american fiber routes. However, this is nothing new... US Transatlantic cable landings (mirrored from John Young's cryptome.org):

Re: [Backbone Infrastructure and Secrecy]

2003-07-08 Thread Joel Jaeggli
On Tue, 8 Jul 2003, Joshua Sahala wrote: i think that that is the point of the article - mr gorman is 'the one' ;) he mapped something that those who put it together hoped was unmappable. now it seems that they are blaming their incompetance on his skills. could his work be used to better

RE: Backbone Infrastructure and Secrecy

2003-07-08 Thread Deepak Jain
Security by obscurity is not viable for the long-term. Amen. This whole industry is littered with NDAs and such which only keep honest people honest. There is _nothing_ stopping a malicious individual (or group of acting collaboratively but independently) from getting hired to a

Seeking NJ-NYC connectivity

2003-07-08 Thread Charles Sprickman
Hi, Hopefully this isn't too far off, but besides shopping I need some input on what it is I actually want... The situation is that we'd need to take a DS3 backhaul for DSL in northern Jersey somewhere, and find a cheap way to cross the Hudson and have it land at Telehouse. I know I can find a

Why can't I default Originate?

2003-07-08 Thread Vandy Hamidi
Platform: Cisco 7206VXR SW: Version 12.2(15)T2 router#sh run | b bgp router bgp 65011 no synchronization bgp log-neighbor-changes bgp confederation identifier 12345 bgp confederation peers 65001 65021 bgp deterministic-med

Re: Mark Allman: Internet measurement: what next?

2003-07-08 Thread Jack Bates
Matt Levine wrote: Gomez seems to be trying to do this, with a monetary incentive: http://www.porivo.com/peernetwork/jsp/index.jsp Test is narrowed to webserver performance and is limited in the actual test methods. From what I can tell, it says nothing about network performance except in the

Re: Mark Allman: Internet measurement: what next?

2003-07-08 Thread Matt Levine
On Tuesday, July 8, 2003, at 3:59PM, Jack Bates wrote: Matt Levine wrote: Gomez seems to be trying to do this, with a monetary incentive: http://www.porivo.com/peernetwork/jsp/index.jsp Test is narrowed to webserver performance and is limited in the actual test methods. From what I can tell,

Re: [Backbone Infrastructure and Secrecy]

2003-07-08 Thread Jack Bates
Joel Jaeggli wrote: The part that's striking to me, is that as usual, the folks in the industry don't know when their facilities are co-mingled, in part becuase that information simply isn't readily and easily available unless someone's willing to go out collect the small little bits and connect

Tertiary or 2nd Secondary DNS?

2003-07-08 Thread up
This question might be more suitable for inet-access, but it's down, so I'm resending here: Silly question: If you have a customer who is doing their own primary DNS, but you are doing their secondary DNS (on 2 of your name servers) for them, is it better practice on your 2nd DNS server to

Re: Why can't I default Originate?

2003-07-08 Thread Haesu
After you applied default-originate to peer-group, have you done soft-clear of your bgp session? It usually takes a little while for changes in config to propagate, unless you force an update using soft clear... -hc -- Sincerely, Haesu C. TowardEX Technologies, Inc. WWW:

Re: Why can't I default Originate?

2003-07-08 Thread David Barak
As I recall, making changes to a peer-group outbound policy will require all of the peer-group members to reset (or at least the peer-group leader). Until that reset happens, a soft clear to a follower session will only re-send the output of the previously calcluated policy. I seem to remember

RE: Why can't I default Originate?

2003-07-08 Thread Vandy Hamidi
Thanks HC, Two things. I was told this was not a topic for this list. Sorry about that. Since I've already posted, I think I should post what the problem was. Problem=I'm stupid. I wasn't looking in the right place for what I was advertising. I ran: router#sh ip bgp nei 10.99.200.75 adv BGP

Re: Why can't I default Originate?

2003-07-08 Thread Haesu
Well, the idea of peer-group is to.. as what the name sugests 'group' the peers into a single and simple configuration.. Default route origination to a peer although may be specific to a neighbor like in your situation, is still a configuration for peering neighbor; hence making it possible to

Re: [Backbone Infrastructure and Secrecy]

2003-07-08 Thread Adam Kujawski
Quoting Joel Jaeggli [EMAIL PROTECTED]: The part that's striking to me, is that as usual, the folks in the industry don't know when their facilities are co-mingled, in part becuase that information simply isn't readily and easily available unless someone's willing to go out collect the small

Re: [Tertiary or 2nd Secondary DNS?]

2003-07-08 Thread Joshua Sahala
i personally point all of my 'secondary' servers at theirs for the 'primary' or master. having my box slave off another of my boxes that is a slave is sort of like rip routing - dns by rumour anyone... i prefer this method because then they are the 'only ones' who can screw up the zones...(not

Re: [Re: [Backbone Infrastructure and Secrecy]]

2003-07-08 Thread Joshua Sahala
Adam Kujawski [EMAIL PROTECTED] wrote: [cut] Exactly. I think we all agree that this kind of information would be usefull for a variety of reasons (locating available resources, ensuring path redundancy, identifying critical points of failure, etc). I think we all agree that this

RE: Why can't I default Originate?

2003-07-08 Thread Stephen J. Wilcox
Still doesn't answer why CISCO says you apply default orig to the peer, not the peer group (which we've proven is backwards). It shouldn't be this way since you may want to use the peer group as a template for multiple customers, but they may not all want 0/0 sent to them. ALSO I didn't need

Re: Tertiary or 2nd Secondary DNS?

2003-07-08 Thread John Payne
--On Tuesday, July 8, 2003 4:22 PM -0400 [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: This question might be more suitable for inet-access, but it's down, so I'm resending here: Silly question: If you have a customer who is doing their own primary DNS, but you are doing their secondary DNS (on

Re: [Re: [Backbone Infrastructure and Secrecy]]

2003-07-08 Thread E.B. Dreger
JS Date: Tue, 08 Jul 2003 18:14:59 -0400 JS From: Joshua Sahala JS better yet, make it widely available and subject to a lot of scrutiny JS and work to fix the problems (think openbsd - one remote compromise JS in how many years...) Turn off daemons. Hope the IP stack doesn't offer a

Re: Seeking NJ-NYC connectivity

2003-07-08 Thread Charles Sprickman
Hi, Just wanted to thank everyone for their input. There are certainly more people providing all sorts of non-traditional connectivity to choose from. It seems some of the most cost-effective options land across the river at 111 Pavonia or 24 Exchange Place. My last question would be, what

Re: [Backbone Infrastructure and Secrecy]

2003-07-08 Thread Chris Kilbourn
At 5:57 PM -0400 7/8/03, Adam Kujawski wrote: I like the idea of a clearinghouse where one can access the data after a background check and a NDA. Except for the fact that it expensive and time consuming to do background checks. The FBI is still chewing through a backlog of thousands of